LiteLLM 1.107.0 Supply Chain Attack Steals AI Credentials
A malicious version of LiteLLM 1.107.0 was published to PyPI on October 21, 2026, embedding credential-harvesting payloads that execute automatically during Python interpreter startup—before any import statement is reached. The attack targeted authentication material across developer tools, AI applications, cloud environments, and browsers, with a secondary module specifically targeting LiteLLM proxy credential and model-configuration records. Defenders are warned not to invoke Python or pip inside suspect environments, as doing so can trigger the payload.